Turbo Quattro

IP address is in measurement value - IP4: $2ABB and IP6: $2ABC

Port: 5555

software:
https://dl.google.com/android/repositor ... indows.zip

adb connect - Android ADB Shell Commands Manual

Gateway use ip-address: 169.254.170.148

​???B4DD9FBEE665A0DAD0C145D67DB433171C616BB4F153DF7BC45CD11CC527511101873F44B976364E8A971ACDACAF336ECB67B29DAB8E61E6AB8A700605B1C57040F916F69CDE1859560E27D16278B1290734F8986ACEE48AD5A51E7E557D953174C423BB142771A24757B4BFF813302AD081B194D9F59D34A0CC08090614E3DE2251FCD0DBC849EA6DF8A6D9886E613B46DE9B0E6 ...

​Metainfo_Public :D ...

​[global]Name=Audi_MMI_0906_2.4_GHz
Description = Audi MiB3+ Head Unit


[service_wifi_aera]
Type=wifi
SSID=417564695f4d4d495f303930365f322e345f47487a2020
Passphrase=ugkl-nptq-nlsu
IPv4=10.174.189.110/255.255.255.0/10.174.189.1
IPv6=off

​http://172.16.250.248:14712/viwi/chassi ... bcc2cef9eb

Next information:

fd53:7cb8:383:7::73


172.16.250.248


MMX: 172.16.250.248 - port=20991




127.0.0.1 localhost.localdomain localhost mib3p-ivi


10.0.0.130 mib3p-ivi ivi
10.0.0.131 mib3p-sys sys
10.0.0.16 mib3p-rsc rsc
10.173.189.1 hotspot-24 hotspot-24.mib3 hotspot
10.174.189.1 hotspot-50 ...

Maybe use SSH permission:
​ modul1.txt
-----BEGIN RSA PRIVATE KEY-----
MIIJKQIBAAKCAgEAvkDGMw4ePECdI9BTPPwni8VyKVZsp+iPyAcgTAKS1QKNXeFa
zENYqdIHkIL+t7TF9Is2sbnXiaEXLlQRNo8wv3U/fPCgWhb5y2BSwKW9FmUiyVbN
LyRGkTLv1urOAjE/lWPwzzNnRx/YmHyw6C25u14XoYEh8apx2o+wysjcANOuFp8V
p5KTu80lep6/AvSW6GMKIPiZm ...

Software - MPR3_ER_AU_P3853 - Audi mirrorserver: 8W0906961BM

I have seen in the file: rootfs.cpio - root:$1$hZioE95j$24nWNgxF9m2jvhxFmLlMn0
(emergency mode)
+
HOSTIP=192.168.0.2
HOSTDEVICE=/dev/ttyUSB0
FPGAIP=192.168.0.1
FPGADEVICE=/dev/ttyAMA1
DEVICEBAUD=115200
PPPDEVICE=/dev/ppp



+

next file ...

If you help me with the way without soldering......

Try it now...

How connect the unit like USB device to PC???

It's not true.

Could you open in the emergency menu.

The same question....

Why??

Emergency mode is out of range - all stopped on this message:

Got an exception: socket failed
.
This should not have happened. Your device is now broken. You now own both halves.

This type of jtag has been used on RNS510 - i see on MXX-board too:
https://mega.nz/file/uU9zRDYT#jr-skTbUY ... fAKqcQHB1c


Maybe somebody has connected with jtag to mmx-board on Alpine???


How read emmc - KLMCG8GESD on the board???

Maybe this place: ???

The same story like by Technisat...somebody has the key...